Information Technology Reference
In-Depth Information
2
1
Wireless
Internet
3
Cable
Modem
WAP
Laptop (HP)
Laptop (Dell)
Dell
Linux
Linux
Laser Printer
Linux
Windows XP Pro
Windows XP Pro
Figure 7.2
Generic home configuration.
Figure 7.2 presents a generic home wireless networking and wireless security
configuration.
Key security features based on the numbered items in the figure include:
1. No specific security feature; wired Ethernet connection to wireless access
point (WAP).
2. On WAP, modify factory default service set identification (SSID); this is the
name of the wireless network. Set up wireless equivalent privacy (WEP)—128
bit key is stronger; however, results (i.e., wireless link remains up) are more
consistent using 64 bit key. Add filtering of Media Access Control (MAC)
addresses.
3. Set up devices accessing WAP with consistent SSID and WEP key.
7.4.5
IA
2
Perspective
When developing wireless security, the IA architect should seek out guidance on
industry best practices like NIST SP 800-48:
Wireless Network Security—802.11,
Bluetooth and Handheld Devices
. Moreover, consider that wireless is more than just
data. Wireless includes voice, still picture, and video. Wireless technology ranks
high in the high-security risk category. Some risks are subtle, as with camera
phones, and some more obvious, like wireless laptops, including IR links. Corpo-
rate policy needs to address internal use of wireless as well as use of wireless devices
on customer sites.
IA requirements for wireless and mobile technology are far more than securing
the technology. The IA
2
views provide guidance for determining risks to informa-
tion as an organizational asset as well as decisions that depend on information.
People need to be aware of the risks and prepared to mitigate risks. Policies provide
for risk mitigation, e.g., using hard drive encryption on laptops so the loss of the
asset does not include disclosure of the data, and backup policies so that same lap-
top theft does not include loss of data.
